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1. Documentation conventions 


For brevity and consistency, this document refers to families of 
types using a shorthand syntax and refers to several expository, 
mnemonic functions when describing the semantics of instructions. 
The range of valid values for those types and the semantics of those 
functions are defined in the following subsections. 


1.1. Types 


This document refers to integer types with the notation SN to 
specify a type's signedness (S) and bit width (N), respectively. 


S Meaning 
u unsigned 
s signed 
Table 1: 
Meaning of 


signedness 
notation. 


N Bit width 


8 8 bits 

16 16 bits 
32 32 bits 
64 64 bits 
128 128 bits 


Table 2: Meaning 
of bit-width 
notation. 


For example, u32 is a type whose valid values are all the 32-bit 
unsigned numbers and si6 is a types whose valid values are all the 
16-bit signed numbers. 
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2. 


Functions 


*htobe16: Takes an unsigned 
and returns the equivalent 
big-endian format. 


*htobe32: Takes an unsigned 
and returns the equivalent 
big-endian format. 


*htobe64: Takes an unsigned 
and returns the equivalent 
big-endian format. 


*htole16: Takes an unsigned 
and returns the equivalent 
little-endian format. 


*htole32: Takes an unsigned 
and returns the equivalent 
little-endian format. 


*htole64: Takes an unsigned 
and returns the equivalent 
little-endian format. 


16-bit 
number 


32-bit 
number 


64-bit 
number 


16-bit 
number 


32-bit 
number 


64-bit 
number 


number in host-endian 
as an unsigned 16-bit 


number in host-endian 
as an unsigned 32-bit 


number in host-endian 
as an unsigned 64-bit 


number in host-endian 
as an unsigned 16-bit 


number in host-endian 
as an unsigned 32-bit 


number in host-endian 
as an unsigned 64-bit 


format 
number 


format 
number 


format 
number 


format 
number 


format 
number 


format 
number 


*bswap16: Takes an unsigned 16-bit number in either big- or 


little-endian format and returns the equivalent number with the 


same bit width but opposite endianness. 
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*bswap32: Takes an unsigned 32-bit number in either big- or 
little-endian format and returns the equivalent number with the 
same bit width but opposite endianness. 


*bswap64: Takes an unsigned 64-bit number in either big- or 
little-endian format and returns the equivalent number with the 
same bit width but opposite endianness. 


Definitions 


Sign Extend To sign extend an X -bit number, A, to a Y -bit number, 
B , means to 


1. Copy all X bits from A to the lower X bits of B. 


2. Set the value of the remaining Y - X bits of B to the 
value of the most-significant bit of A. 


Example 


Sign extend an 8-bit number A to a 16-bit number B on a big-endian 
platform: 


A: 10000110 
B: 11111111 10000110 


Conformance groups 


An implementation does not need to support all instructions 
specified in this document (e.g., deprecated instructions). Instead, 
a number of conformance groups are specified. An implementation must 
support the base32 conformance group and may support additional 
conformance groups, where supporting a conformance group means it 
must support all instructions in that conformance group. 


The use of named conformance groups enables interoperability between 
a runtime that executes instructions, and tools as such compilers 
that generate instructions for the runtime. Thus, capability 
discovery in terms of conformance groups might be done manually by 
users or automatically by tools. 


Each conformance group has a short ASCII label (e.g., "base32") that 
corresponds to a set of instructions that are mandatory. That is, 
each instruction has one or more conformance groups of which it is a 
member . 


This document defines the following conformance groups: 


*base32: includes all instructions defined in this specification 
unless otherwise noted. 


*base64: includes base32, plus instructions explicitly noted as 
being in the base64 conformance group. 


*atomic32: includes 32-bit atomic operation instructions (see 
Atomic operations (Section 4.3)). 


*atomic64: includes atomic32, plus 64-bit atomic operation 
instructions. 


*divmul32: includes 32-bit division, multiplication, and modulo 
instructions. 


*divmul64: includes divmul32, plus 64-bit division, 
multiplication, and modulo instructions. 


*packet: deprecated packet access instructions. 
2. Instruction encoding 
BPF has two instruction encodings: 


*the basic instruction encoding, which uses 64 bits to encode an 
instruction 


*the wide instruction encoding, which appends a second 64 bits 
after the basic instruction for a total of 128 bits. 


2.1. Basic instruction encoding 
A basic instruction is encoded as follows: 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| opcode regs | offset | 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| imm | 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
opcode operation to perform, encoded as follows: 
+-+-+-+-+-+-+-+-+ 
|specific |class| 


+-+-+-+-+-+-+-+-+ 


specific The format of these bits varies by instruction class 


class The instruction class (see Instruction classes 
(Section 2.3)) 


regs The source and destination register numbers, encoded as 
follows on a little-endian host: 


+-+-+-+-+-+-+-+-+ 
|src_reg|dst_reg| 
+-+-+-+-+-+-+-+-+ 


and as follows on a big-endian host: 


+-+-+-+-+-+-+-+-+ 
|dst_reg|src_reg| 
+-+-+-+-+-+-+-+-+ 


src_reg the source register number (0-10), except where 
otherwise specified (64-bit immediate instructions 
(Section 4.4) reuse this field for other purposes) 


dst_reg destination register number (0-10) 
offset signed integer offset used with pointer arithmetic 
imm signed integer immediate value 
Note that the contents of multi-byte fields ('offset' and 'imm') are 
stored using big-endian byte ordering on big-endian hosts and 


little-endian byte ordering on little-endian hosts. 


For example: 


opcode offset imm assembly 
src_reg dst_reg 

07 0 1 00 00 44 33 22 11 ri += 0x11223344 // little 
dst_reg src_reg 

07 1 0 00 0O 11 22 33 44 r1 += 0x11223344 // big 


Note that most instructions do not use all of the fields. Unused 
fields shall be cleared to zero. 


2.2. Wide instruction encoding 
Some instructions are defined to use the wide instruction encoding, 
which uses two 32-bit immediate values. The 64 bits following the 
basic instruction format contain a pseudo instruction with ‘opcode', 


‘dst_reg', 'src_reg', and '‘offset' all set to zero. 


This is depicted in the following figure: 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


ie) 


pcode 


regs 


offset 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


imm 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


reserved 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


next_imm 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


2. 


opcode 


reg 


The three least significant bits of the 'opcode' field store the 


S 


explained above 


signed integer immediate value 


unused, 


set to zero 


Instruction classes 


instruction class: 


offset 
imm 
reserved 
next_imm 
3. 
class value 
LD 0x0 
LDX 0x1 
ST 0x2 
STX 0x3 
ALU 0x4 
JMP 0x5 
JMP32 
Ox6 
ALU64 
0x7 


description 
non-standard load 
operations 

load into register 
operations 

store from immediate 
operations 

store from register 
operations 

32-bit arithmetic 
operations 


64-bit jump operations 


32-bit jump operations 


64-bit arithmetic 
operations 


Table 3 


operation to perform, encoded as explained above 


signed integer offset used with pointer arithmetic 


second signed integer immediate value 


reference 
store 


The source and destination register numbers, encoded as 


instructions 


Load and 
(Section 4) 
Load and store 


instructions 


(Section 4) 


Load and store 


instructions 


(Section 4) 


Load and store 


instructions 


(Section 4) 
Arithmetic and jump 


instructions (Section 


3) 


Arithmetic and jump 
instructions (Section 


3) 


Arithmetic and jump 
instructions (Section 


3) 


Arithmetic and jump 
instructions (Section 


3) 


3. Arithmetic and jump instructions 


For arithmetic and jump instructions (ALU, ALU64, JMP and JMP32), 


the 8-bit 'opcode' field is divided into three parts: 


+-+-+-+-+-+-4+-4+-4+ 
| code |s|class| 
+-+-+-+-+-+-+-+-+ 


code 


s (source) 


the operation code, whose meaning varies by instruction class 


the source operand location, which unless otherwise 


specified is one of: 


source value description 


K 0 use 32-bit 'imm' value as source operand 
X al use 'src_reg' register value as source operand 
Table 4 


instruction class the instruction class (see Instruction classes 
(Section 2.3) ) 


.1. Arithmetic instructions 


ALU uses 32-bit wide operands while ALU64 uses 64-bit wide operands 
for otherwise identical operations. ALU64 instructions belong to the 
base64 conformance group unless noted otherwise. The 'code' field 
encodes the operation as below, where 'src' and 'dst' refer to the 
values of the source and destination registers, respectively. 


name code offset description 
ADD 0x0 0 dst += src 
SUB 0x1 0 dst -= src 
MUL Ox2 0 dst *= src 
DIV 0x3 0 dst = (src != 0) ? (dst / src) : 0 
SDIV 0x3 1 dst = (src != 0) ? (dst s/ src) : 0 
OR 0x4 0 dst |= src 
AND 0x5 0 dst &= src 
LSH Ox6 0 dst <<= (src & mask) 
RSH 0x7 0 dst >>= (src & mask) 
NEG 0x8 0 dst = -dst 
MOD 0x9 0 dst = (src != 0) ? (dst % src) : dst 
SMOD 0x9 1 dst = (src != 0) ? (dst s% src) : dst 
XOR Oxa 0 dst 4= src 
MOV Oxb 0 dst = src 
MOVSX 8/16/32 
Oxb dst = (s8,816,S32)src 
ARSH Oxc 0 


name code offset description 


END Oxd (0) 


dst 


dst 


dst 


dst 


sign extending (Section 1.3) dst >>= (src & 
mask) 
byte swap operations (see Byte swap 
instructions (Section 3.2) below) 

Table 5 


Underflow and overflow are allowed during arithmetic operations, 
meaning the 64-bit or 32-bit value will wrap. If BPF program 
execution would result in division by zero, the destination register 
is instead set to zero. If execution would result in modulo by zero, 
for ALU64 the value of the destination register is unchanged whereas 
for ALU the upper 32 bits of the destination register are zeroed. 


{ADD, X, ALU}, where 'code' = ADD, 'source' = X, and 'class' = ALU, 
means: 


= (u32) ((u32) dst + (u32) src) 
where '(u32)' indicates that the upper 32 bits are zeroed. 
{ADD, X, ALU64} means: 
= dst + src 
{XOR, K, ALU} means: 
= (u32) dst ^ (u32) imm 
{XOR, K, ALU64} means: 
= dst ^ imm 


Note that most instructions have instruction offset of 0. Only three 
instructions (SDIV, SMOD, MOVSX) have a non-zero offset. 


Division, multiplication, and modulo operations for ALU are part of 
the "divmul32" conformance group, and division, multiplication, and 
modulo operations for ALU64 are part of the "divmul64" conformance 
group. The division and modulo operations support both unsigned and 
signed flavors. 


For unsigned operations (DIV and MOD), for ALU, 'imm' is interpreted 
as a 32-bit unsigned value. For ALU64, 'imm' is first sign extended 
(Section 1.3) from 32 to 64 bits, and then interpreted as a 64-bit 
unsigned value. 


For signed operations (SDIV and SMOD), for ALU, 'imm' is interpreted 
as a 32-bit signed value. For ALU64, 'imm' is first sign extended 


(Section 1.3) from 32 to 64 bits, and then interpreted as a 64-bit 
signed value. 


Note that there are varying definitions of the signed modulo 
operation when the dividend or divisor are negative, where 
implementations often vary by language such that Python, Ruby, etc. 
differ from C, Go, Java, etc. This specification requires that 
Signed modulo use truncated division (where -13 % 3 == -1) as 
implemented in C, Go, etc.: 


a%n=a - n * trunc(a / n) 


The MOVSX instruction does a move operation with sign extension. 
{MOVSX, X, ALU} sign extends (Section 1.3) 8-bit and 16-bit operands 
into 32 bit operands, and zeroes the remaining upper 32 bits. 
{MOVSX, X, ALU64} sign extends (Section 1.3) 8-bit, 16-bit, and 32- 
bit operands into 64 bit operands. Unlike other arithmetic 
instructions, MOVSX is only defined for register source operands 


(X). 


The NEG instruction is only defined when the source bit is clear 


(K). 


Shift operations use a mask of Ox3F (63) for 64-bit operations and 
Ox1F (31) for 32-bit operations. 


3.2. Byte swap instructions 


The byte swap instructions use instruction classes of ALU and ALU64 
and a 4-bit 'code' field of END. 


The byte swap instructions operate on the destination register only 
and do not use a separate source register or immediate value. 


For ALU, the 1-bit source operand field in the opcode is used to 
select what byte order the operation converts from or to. For ALU64, 
the 1-bit source operand field in the opcode is reserved and must be 
set to 0. 


class source value description 

convert between host byte order and little 
ALU TO_LE 0 : 

endian 

convert between host byte order and big 
ALU TO_BE 1 ; 

endian 


ALU64 Reserved be 
do byte swap unconditionally 


Table 6 


The 'imm' field encodes the width of the swap operations. The 
following widths are supported: 16, 32 and 64. Width 64 operations 


belong to the base64 conformance group and other swap operations 
belong to the base32 conformance group. 


Examples: 


16/32/64 means: 


{END, TO_LE, ALU} with imm 


dst 
dst 
dst 


htole16(dst) 
htole32(dst) 
htole64(dst) 


16/32/64 means: 


{END, TO_BE, ALU} with imm 


dst 
dst 
dst 


htobe16(dst ) 
htobe32(dst) 
htobe64(dst) 


{END, TO_LE, ALU64} with imm = 16/32/64 means: 


dst 
dst 
dst 


bswap16(dst ) 
bswap32(dst) 
bswap64(dst) 


.3. Jump instructions 


JMP32 uses 32-bit wide operands and indicates the base32 conformance 
group, while JMP uses 64-bit wide operands for otherwise identical 
operations, and indicates the base64 conformance group unless 
otherwise specified. The 'code' field encodes the operation as 
below: 


code value src_reg description notes 
JA 0x0 0x0 PC += offset {JA, K, JMP} only 
JA 0x0 0x0 PC += imm {JA, K, JMP32} only 
JEQ oa an PC += offset if 
y dst == src 
PC += offset if 
JGT 0x2 any unsigned 
dst > src 
PC += offset if : 
JGE 0x3 any unsigned 
dst >= src 
JSET PC += offset if 
0x4 any 
dst & src 
PC += offset if 
JNE 0x5 any 
dst != src 
JSGT PC += offset if F 
0x6 any signed 
dst > src 
JSGE PC += offset if . 
0x7 any signed 


dst >= src 
0x8 0x0 


code value src_reg description notes 


CANL call helper {CALL, K, JMP} only, see 
function by Helper functions 
address (Section 3.3.1) 
{CALL, K, JMP} only, see 
CALL . F 
0x8 0x1 call PC += imm Program-local functions 
(Section 3.3.2) 
CALL call helper {CALL, K, JMP} only, see 
0x8 0x2 function by BTF Helper functions 
ID (Section 3.3.1) 
EXIT 
0x9 0x0 return {CALL, K, JMP} only 


PC += offset if 


JLT Oxa an unsigned 
7 dst < src g 
PC += offset if : 
JLE Oxb any unsigned 
dst <= src 
JSLT PC += offset if . 
Oxc any signed 
dst < src 
JSLE PC += offset if . 
xd any signed 


dst <= src 
Table 7 


The BPF program needs to store the return value into register RO 
before doing an EXIT. 


Example: 
{JSGE, X, JMP32} means: 

if (s32)dst s>= (s32)src goto +offset 
where 's>=' indicates a signed '>=' comparison. 
{JA, K, JMP32} means: 

gotol +imm 
where 'imm' means the branch offset comes from insn 'imm' field. 
Note that there are two flavors of JA instructions. The JMP class 
permits a 16-bit jump offset specified by the 'offset' field, 
whereas the JMP32 class permits a 32-bit jump offset specified by 
the 'imm' field. A > 16-bit conditional jump may be converted to a < 


16-bit conditional jump plus a 32-bit unconditional jump. 


All CALL and JA instructions belong to the base32 conformance group. 


3.3.1. Helper functions 


Helper functions are a concept whereby BPF programs can call into a 
set of function calls exposed by the underlying platform. 


Historically, each helper function was identified by an address 
encoded in the imm field. The available helper functions may differ 
for each program type, but address values are unique across all 
program types. 


Platforms that support the BPF Type Format (BTF) support identifying 
a helper function by a BTF ID encoded in the imm field, where the 
BTF ID identifies the helper name and type. 


3.3.2. Program-local functions 


Program-local functions are functions exposed by the same BPF 
program as the caller, and are referenced by offset from the call 
instruction, similar to JA. The offset is encoded in the imm field 
of the call instruction. A EXIT within the program-local function 
will return to the caller. 


4. Load and store instructions 


For load and store instructions (LD, LDX, ST, and STX), the 8-bit 
‘opcode' field is divided as: 


+-+-+-+-+-+-+-+-+ 
|mode |sz |class| 


+-+-+-+-+-+-+-+-+ 


mode The mode modifier is one of: 


mode ee 
o. value description reference 

modifier 

FWN 5 64-bit immediate 64-bit immediate 
instructions instructions (Section 4.4) 

ABS i legacy BPF packet Legacy BPF Packet access 
access (absolute) instructions (Section 4.5) 

sip J legacy BPF packet Legacy BPF Packet access 
access (indirect) instructions (Section 4.5) 

ne 3 regular load and Regular load and store 
store operations operations (Section 4.1) 

MEMSX E sign-extension load Sign-extension load 
operations operations (Section 4.2) 

f . Atomic operations 
ATOMIC 6 atomic operations 


(Section 4.3) 
Table 8 


sz (size) 


The size modifier is one of: 


size value description 


W (0 word (4 bytes) 

H 1 half word (2 bytes) 

B 2 byte 

DW 3 double word (8 bytes) 
Table 9 


Instructions using DW belong to the base64 conformance group. 


class The instruction class (see Instruction classes (Section 2.3)) 


4.1. Regular load and store operations 


The MEM mode modifier is used to encode regular load and store 
instructions that transfer data between a register and memory. 


{MEM, <size>, STX} means: 
*(size *) (dst + offset) = src 
{MEM, <size>, ST} means: 
*(size *) (dst + offset) = imm 
{MEM, <size>, LDX} means: 
dst = *(unsigned size *) (src + offset) 


Where '<size>' is one of: B, H, W, or DW, and 'unsigned size' is one 
of: u8, u16, u32, or u64. 


4.2. Sign-extension load operations 
The MEMSX mode modifier is used to encode sign-extension 


(Section 1.3) load instructions that transfer data between a 
register and memory. 


{MEMSX, <size>, LDX} means: 
dst = *(signed size *) (src + offset) 


Where size is one of: B, H, or W, and 'signed size' is one of: s8, 
s16, or s32. 


4.3. Atomic operations 


Atomic operations are operations that operate on memory and can not 
be interrupted or corrupted by other access to the same memory 
region by other BPF programs or means outside of this specification. 


All atomic operations supported by BPF are encoded as store 
operations that use the ATOMIC mode modifier as follows: 


*fATOMIC, W, STX} for 32-bit operations, which are part of the 
"atomic32" conformance group. 


*fATOMIC, DW, STX} for 64-bit operations, which are part of the 
"atomic64" conformance group. 


*8-bit and 16-bit wide atomic operations are not supported. 


The 'imm' field is used to encode the actual atomic operation. 
Simple atomic operation use a subset of the values defined to encode 
arithmetic operations in the 'imm' field to encode the atomic 
operation: 


imm value description 

ADD 0x00 atomic add 

OR 0x40 atomic or 

AND 0x50 atomic and 

XOR 0xaOQ atomic xor 
Table 10 


{ATOMIC, W, STX} with 'imm' = ADD means: 
* (u32 *)(dst + offset) += src 

{ATOMIC, DW, STX} with 'imm' = ADD means: 
*(u64 *)(dst + offset) += src 


In addition to the simple atomic operations, there also is a 
modifier and two complex atomic operations: 


imm value description 

FETCH 0x01 modifier: return old value 

XCHG OxeO | FETCH atomic exchange 

CMPXCHG OxfO | FETCH atomic compare and exchange 
Table 11 


The FETCH modifier is optional for simple atomic operations, and 
always set for the complex atomic operations. If the FETCH flag is 


set, then the operation also overwrites src with the value that was 
in memory before it was modified. 


The XCHG operation atomically exchanges src with the value addressed 
by dst + offset. 


The CMPXCHG operation atomically compares the value addressed by dst 
offset with RO. If they match, the value addressed by dst + offset 
is replaced with src. In either case, the value that was at dst + 
offset before the operation is zero-extended and loaded back to RO. 


+ 


4.4. 


Instructions with the IMM 'mode' 


64-bit immediate instructions 


modifier use the wide instruction 


encoding defined in Instruction encoding (Section 2), and use the 
"src_reg' field of the basic instruction to hold an opcode subtype. 


The following table defines a set of {IMM, Dw, 


LD} instructions with 


opcode subtypes in the 'src_reg' field, using new terms such as 
"map" defined further below: 


src_reg pseudocode 

0x0 dst = (next_imm << 32) | imm 

0x1 dst = map_by_fd(imm) 

DO dst = map_val(map_by_fd(imm)) + 
next_imm 

0x3 dst = var_addr (imm) 

0x4 dst = code_addr (imm) 

0x5 dst = map_by_idx(imm) 

xe dst = map_val(map_by_idx(imm)) + 
next_imm 

Table 12 
where 


imm type 
integer 
map fd 


map fd 
variable 
id 
integer 
map index 


map index 


dst type 
integer 
map 
data 
pointer 
data 
pointer 
code 
pointer 
map 
data 
pointer 


*map_by_fd(imm) means to convert a 32-bit file descriptor into an 
address of a map (see Maps (Section 4.4.1)) 


*map_by_idx(imm) means to convert a 32-bit index into an address 


of a map 


*map_val(map) gets the address of the first value in a given map 


*var_addr(imm) gets the address of a platform variable (see 
Platform Variables (Section 4.4.2)) with a given id 


*code_addr(imm) gets the address of the instruction at a specified 
relative offset in number of (64-bit) instructions 


*the 'imm type' can be used by disassemblers for display 


*the 'dst type' can be used for verification and JIT compilation 
purposes 


4.4.1. Maps 


Maps are shared memory regions accessible by BPF programs on some 
platforms. A map can have various semantics as defined in a separate 
document, and may or may not have a single contiguous memory region, 
but the 'map_val(map)' is currently only defined for maps that do 
have a single contiguous memory region. 


Each map can have a file descriptor (fd) if supported by the 
platform, where 'map_by_fd(imm)' means to get the map with the 
specified file descriptor. Each BPF program can also be defined to 
use a set of maps associated with the program at load time, and 
"map_by_idx(imm)' means to get the map with the given index in the 
set associated with the BPF program containing the instruction. 


4.4.2. Platform Variables 


Platform variables are memory regions, identified by integer ids, 
exposed by the runtime and accessible by BPF programs on some 
platforms. The 'var_addr(imm)' operation means to get the address of 
the memory region identified by the given id. 


4.5. Legacy BPF Packet access instructions 


BPF previously introduced special instructions for access to packet 
data that were carried over from classic BPF. These instructions 
used an instruction class of LD, a size modifier of W, H, or B, and 
a mode modifier of ABS or IND. The 'dst_reg' and 'offset' fields 
were set to zero, and 'src_reg' was set to zero for ABS. However, 
these instructions are deprecated and should no longer be used. All 
legacy packet access instructions belong to the "packet" conformance 
group. 


5. IANA Considerations 


This document defines two sub-registries. 


5. 


1. BPF Instruction Conformance Group Registry 
This document defines a IANA sub-registry for BPF instruction 
conformance groups, as follows: 
*Name of the registry: BPF Instruction Conformance Groups 
*Name of the registry group: BPF Instructions 
*Required information for registrations: The values to appear in 
the entry fields. 
*Syntax of registry entries: Each entry has the following fields: 
-name: alphanumeric label indicating the name of the 
conformance group 
-description: brief description of the conformance group 
-includes: any other conformance groups that are included from 
this group 
-excludes: any other conformance groups that are excluded from 
this group. 
-status: Permanent, Provisional, or Historical 
-reference: a reference to the defining specification 
*Registration policy (see Section 4 of [RFC8126] for details): 
-Permanent: Standards action or IESG Review 
-Provisional: Specification required 
-Historical: Specification required 
Initial entries in this sub-registry are as follows: 
name description includes excludes status reference 
32-bit : 
: RFCXXX Atomic 
atom32 atomic À 
. . z = Permanent operations 
instructions : 
(Section 4.3) 
64-bit r 
RFCXXX Atomic 
atom64 atomic : 
. . atom32 - Permanent operations 
instructions ; 
(Section 4.3) 
base32 


- - Permanent RFCXXX 


name description includes excludes status reference 


32-bit base 
instructions 
64-bit base 
base64 . . 
instructions base32 - Permanent RFCXXX 
. RFECXXX 
32-bit i g 
i nae Arithmetic 
div32 division and - - Permanent tee ae 
instructions 
modulo ae 
(Section 3.1) 
À RFCXXX 
64-bit ’ i 
: Oe: : Arithmetic 
div64 division and div32 - Permanent ee oe. 
instructions 
modulo a 
(Section 3.1) 
RFCXXX Legacy 
Legacy 
BPF Packet 
packet packet Historical 
‘ . - - access 
instructions a a 
instructions 


(Section 4.5) 
Table 13 


NOTE TO RFC-EDITOR: Upon publication, please replace RFCXXX above 
with reference to this document. 


5.1.1. Adding instructions 


A specification may add additional instructions to the BPF 
Instruction Set registry. Once a conformance group is registered 
with a set of instructions, no further instructions can be added to 
that conformance group. A specification should instead create a new 
conformance group that includes the original conformance group, plus 
any newly added instructions. Inclusion of the original conformance 
group is done via the "includes" column of the BPF Instruction 
Conformance Group Registry, and inclusion of newly added 
instructions is done via the "groups" column of the BPF Instruction 
Set Registry. 


5.1.2. Deprecating instructions 


Deprecating instructions that are part of an existing conformance 
group can be done by defining a new conformance group for the newly 
deprecated instructions, and the defining a new conformance group to 
supercede the existing conformance group containing the 
instructions, where the new conformance group includes the existing 
one and excludes the deprecated instruction group. 


For example, if deprecating an instruction in an existing 
hypothetical group called "example", two new groups might be 


registered: 
name description includes excludes status reference 
Legacy 
legacyexample example Historical (reference) 
instructions 
Example 
. P . legacyexample (reference) 
examplev2 instructions example Permanent 
Table 14 


The BPF Instruction Set entries for the deprecated instructions 
would then be updated to add "legacyexample" to the set of groups 
for those instructions. 

Finally, updated implementations that dropped support for the 
deprecated instructions would then be able to claim conformance to 
"examplev2" rather than "example". 


5.2. BPF Instruction Set Registry 


This document proposes a new IANA registry for BPF instructions, as 
follows: 


*Name of the registry: BPF Instruction Set 
*Name of the registry group: BPF Instructions 


*Required information for registrations: The values to appear in 
the entry fields. 


*Syntax of registry entries: Each entry has the following fields: 


-opcode: a 1-byte value in hex format indicating the value of 
the opcode field 


-src: either a value indicating the value of the src field, or 
"any" 


-imm: either a value indicating the value of the imm field, or 
-offset: either a value indicating the value of the offset 
field, or "any" 


-description: description of what the instruction does, 
typically in pseudocode 


6. 


-groups: a list of one or more comma-separated conformance 
groups to which the instruction belongs 


-reference: a reference to the defining specification 


*Registration policy: New instructions require a new entry in the 
conformance group sub-registry and the same registration policies 


apply. 


*Initial registrations: See the Appendix. Instructions other than 
those listed as deprecated are Permanent. Any listed as 
deprecated are Historical. 
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Appendix 
Initial values for the BPF Instruction sub-registry are given below. 
The descriptions in this table are informative. In case of any 
discrepancy, the reference is authoritative. 
opcode src_reg offset imm description groups reference 
64-bit 
6x60 ee 6 any (additional immediate Gace ammediate 
value) instructions 
(Section 4.4) 
dst = (u32)((u32)dst + ee 
0x04 0x0 0 any . base32 instructions 
(u32)imm) : 
(Section 3.1) 
0x00 Jump 
0x05 0x0 any goto +offset base32 instructions 
(Section 3.3) 
Jump 
0x06 0x0 (0) any goto +imm base32 instructions 
(Section 3.3) 
Arithmetic 
0x07 0x0 0) any dst += imm base64 instructions 
(Section 3.1) 
OxOc any (0 base32 


opcode 


OxOf 


0x14 


0x15 


0x16 


0x17 


0x18 


0x18 


0x18 


0x18 


0x18 


0x18 


0x18 


Oxic 


src_reg 


any 


0x0 


0x0 


0x0 


0x0 


0x0 


0x1 


0x2 


0x3 


0x4 


0x5 


0x6 


any 


offset 


any 


any 


imm 


0x00 


0x00 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


description 


dst = (u32)((u32)dst + 


(u32)src) 


dst += src 


dst = (u32)((u32)dst - 


(u32)imm) 


if dst == imm goto 


t+offset 


if (u32)dst == 
t+offset 


dst -= imm 


dst 
imm 


dst 


dst = 


map_val(map_by_fd(imm) ) 


+ next_imm 


dst = var_addr(imm) 
dst = code_addr(imm) 
dst = map_by_idx(imm) 
dst = 


map_val(map_by_idx(imm) ) 


+ next_imm 


(next_imm << 32) 


map_by_fd(imm) 


groups 


base64 


base32 


base64 


base32 


base64 


base64 


base64 


base64 


base64 


base64 


base64 


base64 


base32 


reference 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3:1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
64-bit 
immediate 
instructions 
(Section 4.4) 
64-bit 
immediate 
instructions 
(Section 4.4) 
64-bit 
immediate 
instructions 
(Section 4.4) 
64-bit 
immediate 
instructions 
(Section 4.4) 
64-bit 
immediate 
instructions 
(Section 4.4) 
64-bit 
immediate 
instructions 
(Section 4.4) 
64-bit 
immediate 
instructions 
(Section 4.4) 


opcode 


Oxid 


Oxie 


Oxif 


0x20 


0x24 


0x25 


0x26 


0x27 


0x28 


Ox2c 


0x2d 


0x2e 


0x2f 


0x30 


src_reg 


any 


any 


any 


0x0 


0x0 


0x0 


0x0 


0x0 


0x0 


any 


any 


any 


any 


0x0 


offset 


any 


any 


any 


any 


any 


any 


imm 


0x00 


0x00 


0x00 


0x00 


any 


any 


any 


any 


any 


any 


0x00 


0x00 


0x00 


0x00 


any 


description 
dst = (u32)((u32)dst - 
(u32)src) 


if dst == 
t+offset 


src goto 


if (u32)dst == 
goto t+offset 


(u32)src 


dst -= src 


(deprecated, 
implementation-specific) 


dst = (u32)(dst * imm) 


if dst > imm goto 
+offset 


if (u32)dst > imm goto 
+offset 


dst *= imm 


(deprecated, 


implementation-specific) 


dst = (u32)(dst * src) 


if dst > src goto 
+offset 


if (u32)dst > (u32)src 
goto toffset 


dst *= src 


(deprecated, 
implementation-specific) 


groups 


base64 


base32 


base64 


packet 


divmul32 


base64 


base32 


divmul64 


packet 


divmul32 


base64 


base32 


divmul64 


packet 


reference 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 


Legacy BPF 
Packet access 


instructions 
(Section 4.5) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Legacy BPF 
Packet access 
instructions 
(Section 4.5) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 


Legacy BPF 
Packet access 


opcode 


0x34 


0x34 


0x35 


0x36 


0x37 


0x37 


Ox3c 


Ox3c 


Ox3d 


Ox3e 


Ox3f 


Ox3f 


0x40 


0x44 


0x45 


src_reg 


0x0 


0x0 


0x0 


0x0 


0x0 


0x0 


any 


any 


any 


any 


any 


any 


any 


0x0 


0x0 


offset 


any 


any 


any 


any 


any 


imm 


any 


any 


any 


any 


any 


any 


0x00 


0x00 


0x00 


0x00 


0x00 


0x00 


any 


any 


any 


description 


dst = 
((u32)dst / (u32)imm) 
0) 


dst = 
((s32)dst s/ imm) : 0) 


if dst >= imm goto 
+offset 


if (u32)dst >= imm goto 
+offset 


dst = (imm != 0) ? (dst 
/ (u32)imm) : © 


dst = (imm != 0) ? (dst 
s/ imm) : 0 


dst = (u32)((sre != 0) ? 
((u32)dst / (u32)src) 

0) 

dst = (u32)((src != 0) ? 


((s32)dst s/(s32)src) 
0) 


if dst >= src goto 
+offset 


if (u32)dst >= (u32)src 
goto +offset 


dst = (src != 0) ? (dst 
/ sre) : 0 
dst = (sre != 0) ? (dst 


s/ src) : 0 


(deprecated, 
implementation-specific) 


dst = (u32)(dst | imm) 


if dst & imm goto 
t+offset 


(u32)((imm != 0) ? 


(u32)((imm != 0) ? 


groups 


divmul32 


divmul32 


base64 


base32 


divmul64 


divmul64 


divmul32 


divmul32 


base64 


base32 


divmul64 


divmul64 


packet 


base32 


base64 


reference 
instructions 
(Section 4.5) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 


Legacy BPF 
Packet access 


instructions 
(Section 4.5) 
Arithmetic 

instructions 
(Section 3.1) 


opcode 


0x46 


0x47 


0x48 


0x4c 


0x4d 


0x4e 


0x4f 


0x50 


0x54 


0x55 


0x56 


0x57 


Ox5c 


Ox5d 


src_reg 


0x0 


0x0 


any 


any 


any 


any 


any 


any 


0x0 


0x0 


0x0 


0x0 


any 


any 


offset 


any 


any 


any 


any 


any 


any 


imm 


any 


any 


any 


0x00 


0x00 


0x00 


0x00 


any 


any 


any 


any 


any 


0x00 


0x00 


description 


if (u32)dst & imm goto 
+offset 


dst |= imm 


(deprecated, 
implementation-specific) 


dst = (u32)(dst | src) 


if dst & src goto 
+offset 


if (u32)dst & (u32)src 
goto t+offset 


dst |= src 


(deprecated, 
implementation-specific) 


dst = (u32)(dst & imm) 
if dst != imm goto 
+offset 


if (u32)dst != imm goto 
+offset 


dst &= imm 


dst = (u32)(dst & src) 
if dst != src goto 
+offset 


groups 


base32 


base64 


packet 


base32 


base64 


base32 


base64 


packet 


base32 


base64 


base32 


base64 


base32 


base64 


reference 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 


Legacy BPF 
Packet access 


instructions 
(Section 4.5) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 


Legacy BPF 
Packet access 


instructions 
(Section 4.5) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 


opcode 


Ox5e 


Ox5f 


0x61 


0x62 


0x63 


0x64 


0x65 


0x66 


0x67 


0x69 


Ox6a 


Ox6b 


Ox6c 


©x6d 


Ox6e 


Ox6f 


src_reg 


any 


any 


any 


0x0 


any 


0x0 


0x0 


0x0 


0x0 


any 


0x0 


any 


any 


any 


any 


any 


offset 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


imm 


0x00 


0x00 


0x00 


any 


0x00 


any 


any 


any 


any 


0x00 


any 


0x00 


0x00 


0x00 


0x00 


0x00 


description 


if (u32)dst != (u32)src 
goto +offset 


dst &= src 


dst = *(u32 *)(src + 
offset) 


*(u32 *)(dst + offset) 
imm 


*(u32 *)(dst + offset) 
src 


dst = (u32)(dst << imm) 


if dst s> imm goto 
+offset 


if (s32)dst s> (s32)imm 
goto t+offset 


dst <<= imm 


dst = *(u16 *)(src + 
offset) 


*(u16 *)(dst + offset) 
imm 


*(u16 *)(dst + offset) 
src 


dst = (u32)(dst << src) 


if dst s> src goto 
+offset 


if (s32)dst s> (s32)src 
goto +offset 


dst <<= src 


groups 


base32 


base64 


base32 


base32 


base32 


base32 


base64 


base32 


base64 


base32 


base32 


base32 


base32 


base64 


base32 


base64 


reference 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 


opcode 


0x71 


0x72 


0x73 


0x74 


0x75 


0x76 


0x77 


0x79 


0x7a 


0Ox7b 


Ox7c 


Ox7d 


Ox7e 


Ox7Ff 


0x84 


src_reg 


any 


0x0 


any 


0x0 


0x0 


0x0 


0x0 


any 


0x0 


any 


any 


any 


any 


any 


0x0 


offset 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


imm 


0x00 


any 


0x00 


any 


any 


any 


any 


0x00 


any 


0x00 


0x00 


0x00 


0x00 


0x00 


0x00 


description 


dst = *(u8 *)(src + 
offset) 


*(u8 *)(dst + offset) 
imm 


*(u8 *)(dst + offset) 
src 


dst = (u32)(dst >> imm) 


if dst s>= imm goto 
+offset 


if (s32)dst s>= (s32)imm 
goto +offset 


dst >>= imm 


dst = *(u64 *)(srce + 
offset) 


*(u64 *)(dst + offset) 
imm 


*(u64 *)(dst + offset) 
src 


dst = (u32)(dst >> src) 


if dst s>= src goto 
+offset 


if (s32)dst s>= (s32)src 
goto t+offset 


dst >>= src 


dst = (u32)-dst 


groups 


base32 


base32 


base32 


base32 


base64 


base32 


base64 


base64 


base64 


base64 


base32 


base64 


base32 


base64 


base32 


reference 
Arithmetic 
instructions 
(Section 3.1) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Load and store 
instructions 
(Section 4) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 


opcode 


0x85 


0x85 


0x85 


0x87 


0x94 


0x94 


0x95 


0x97 


0x97 


Ox9c 


Ox9c 


Ox9OFf 


Ox9OFf 


Oxa4 


src_reg 


0x0 


0x1 


0x2 


0x0 


0x0 


0x0 


0x0 


0x0 


0x0 


any 


any 


any 


any 


0x0 


offset 


imm 


any 


any 


any 


0x00 


any 


any 


0x00 


any 


any 


0x00 


0x00 


0x00 


0x00 


any 


description 


call helper function by 
address 


call PC += imm 


call helper function by 
BTF ID 


dst = -dst 

dst = (u32)((imm != 0)? 
((u32)dst % (u32)imm) 
dst) 

dst = (u32)((imm != 0) ? 


((s32)dst s% imm) dst) 


return 


dst = 
% (u32)imm) 


(imm != 0) ? (dst 
dst 


dst = (imm != 0) ? (dst 
s% imm) dst 

dst = (u32)((sre != 0)? 
((u32)dst % (Uu32)src) 
dst) 

dst = (u32)((sre != 0)? 


((s32)dst s% (S32)src) 
:dst) 


dst = 
% src) 


(src != 0) ? (dst 
dst 


dst = 
s% src) 


(src != 0) ? (dst 
dst 


dst = (u32)(dst ^ imm) 


groups 


base32 


base32 


base32 


base32 


divmul32 


divmul32 


base32 


divmul64 


divmul64 


divmul32 


divmul32 


divmul64 


divmul64 


base32 


reference 
Arithmetic 
instructions 
(Section 3.1) 
Helper 
functions 
(Section 3.3.1) 


Program-local 
functions 
(Section 3.3.2) 


Helper 
functions 


(Section 3.3.1) 


Arithmetic 
instructions 
(Section 3:1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 


opcode 


Oxad 


Oxa6 


Oxa7 


Oxac 


Oxad 


Oxae 


Oxaf 


Oxb4 


0xb5 


Oxb6 


Oxb7 


Oxbc 


Oxbc 


Oxbc 


@xbd 


src_reg 


0x0 


0x0 


0x0 


any 


any 


any 


any 


0x0 


0x0 


0x0 


0x0 


any 


any 


any 


any 


offset 


any 


any 


any 


any 


any 


any 


16 


any 


imm 


any 


any 


any 


0x00 


0x00 


0x00 


0x00 


any 


any 


any 


any 


0x00 


0x00 


0x00 


0x00 


description 


if dst < imm goto 
+offset 


if (u32)dst < imm goto 
+offset 


dst ^= imm 


dst = (u32)(dst ^ src) 


if dst < src goto 
+offset 


if (u32)dst < (u32)src 
goto +offset 


dst ^= src 


dst = (u32) imm 


if dst <= imm goto 
+offset 


if (u32)dst <= imm goto 
+offset 


dst = imm 

dst = (u32) src 

dst = (u32) (s32) (s8) 
src 

dst = (u32) (s32) (s16) 
src 


if dst <= src goto 
+offset 


groups 


base64 


base32 


base64 


base32 


base64 


base32 


base64 


base32 


base64 


base32 


base64 


base32 


base32 


base32 


base64 


reference 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 


opcode 


Oxbe 


Oxbf 


Oxbf 


Oxbf 


Oxbf 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


Oxc3 


src_reg 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


offset 


any 


16 


32 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


imm 


0x00 


0x00 


0x00 


0x00 


0x00 


0x00 


0x01 


0x40 


0x41 


0x50 


0x51 


Oxad 


Oxal 


Oxel 


Oxf1 


description 


if (u32)dst <= (u32)src 
goto toffset 


dst = src 

dst = (s64) (s8) src 

dst = (s64) (s16) src 
dst = (s64) (s32) src 


lock *(u32 *)(dst + 
offset) += src 


sre = 
atomic_fetch_add_32((u32 
*)(dst + offset), src) 


lock *(u32 *)(dst + 
offset) |= src 


src = 
atomic_fetch_or_32((u32 
*\)(dst + offset), src) 


lock *(u32 *)(dst + 
offset) &= src 


src = 
atomic_fetch_and_32((u32 
*)(dst + offset), src) 


lock *(u32 *)(dst + 
offset) ^= src 


src = 
atomic_fetch_xor_32((u32 
*)(dst + offset), src) 


sre = xchg_32((u32 *) 
(dst + offset), src) 


groups 


base32 


base64 


base64 


base64 


base64 


atomic32 


atomic32 


atomic32 


atomic32 


atomic32 


atomic32 


atomic32 


atomic32 


atomic32 


atomic32 


reference 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 


opcode 


Oxc4 


Oxcd5 


Oxc6 


Oxc7 


Oxcc 


Oxcd 


Oxce 


Oxcf 


Oxd4 


Oxd4 


Oxd4 


Oxd5 


Oxd6 


Oxd7 


@xd7 


src_reg 


0x0 


0x0 


0x0 


0x0 


any 


any 


any 


any 


0x0 


0x0 


0x0 


0x0 


0x0 


0x0 


0x0 


offset 


any 


any 


any 


any 


any 


any 


imm 


any 


any 


any 


any 


0x00 


0x00 


0x00 


0x00 


0x10 


0x20 


0x40 


any 


any 


0x10 


0x20 


description 
rO = cmpxchg_32( (u32 *) 
(dst + offset), r0, src) 


dst = (u32)(dst s>> imm) 


if dst s< imm goto 
+offset 


if (s32)dst s< (s32)imm 
goto +offset 


dst s>>= imm 


dst = (u32)(dst s>> src) 


if dst s< src goto 
+offset 


if (s32)dst s< (s32)src 
goto +offset 


dst s>>= src 

dst = htole16(dst) 
dst = htole32(dst) 
dst = htole64(dst) 


if dst s<= imm goto 
+offset 


if (s32)dst s<= (s32)imm 
goto +offset 


dst 


bswap16(dst) 


dst 


bswap32(dst) 


groups 


base32 


base64 


base32 


base64 


base32 


base64 


base32 


base64 


base32 


base32 


base64 


base64 


base32 


base32 


base32 


reference 
Atomic 
operations 
(Section 4.3) 
Arithmetic 
instructions 
(Section 3:1) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Arithmetic 
instructions 
(Section 3.1) 
Jump 
instructions 
(Section 3:3) 
Jump 
instructions 
(Section 3.3) 
Arithmetic 
instructions 
(Section 3.1) 
Byte swap 
instructions 
(Section 3.2) 
Byte swap 
instructions 
(Section 3.2) 
Byte swap 
instructions 
(Section 3.2) 
Jump 
instructions 
(Section 3.3) 
Jump 
instructions 
(Section 3.3) 
Byte swap 
instructions 
(Section 3.2) 


opcode 


Oxd7 


Oxdb 


Oxdb 


@xdb 


@xdb 


Oxdb 


Oxdb 


Oxdb 


@xdb 


@xdb 


Oxdb 


Oxdc 


@xdc 


Oxdc 


©xdd 


src_reg 


0x0 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


0x0 


0x0 


0x0 


any 


offset 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


any 


imm 


0x40 


0x00 


0x01 


0x40 


0x41 


0x50 


0x51 


Oxad 


Oxal 


Oxel 


Oxf1 


0x10 


0x20 


0x40 


0x00 


description 


dst = bswap64(dst) 


lock *(u64 *)(dst + 
offset) += src 


src = 
atomic_fetch_add_64( (u64 
*)(dst + offset), src) 


lock *(u64 *)(dst + 
offset) |= src 


src = 
atomic_fetch_or_64((u64 
*\)(dst + offset), src) 


lock *(u64 *)(dst + 
offset) &= src 


sre = 
atomic_fetch_and_64((u64 
*)(dst + offset), src) 


lock *(u64 *)(dst + 
offset) ^= src 


src = 
atomic_fetch_xor_64((u64 
*)(dst + offset), src) 


src = xchg_64((u64 *) 
(dst + offset), src) 


rO = cmpxchg_64((u64 *) 
(dst + offset), r0, src) 
dst = htobe16(dst) 
dst = htobe32(dst) 
dst = htobe64(dst) 


if dst s<= src goto 
t+offset 


groups 


base64 


atomic64 


atomic64 


atomic64 


atomic64 


atomic64 


atomic64 


atomic64 


atomic64 


atomic64 


atomic64 


base32 


base32 


base64 


base64 


reference 
Byte swap 
instructions 
(Section 3.2) 
Byte swap 
instructions 
(Section 3.2) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Atomic 
operations 
(Section 4.3) 
Byte swap 
instructions 
(Section 3.2) 
Byte swap 
instructions 
(Section 3.2) 
Byte swap 
instructions 
(Section 3.2) 


opcode src_reg offset imm description groups reference 
Jump 
instructions 
(Section 3.3) 
Jump 

base32 instructions 
(Section 3.3) 


0x00 if (s32)dst s<= (s32)src 


(0) 
Bae any any goto +offset 


Table 15 
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